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102 GENERATE MASTER TOKEN THAT IDENTIFIES 
THE DATA ACCESS MANAGER AND A HOST TOKEN 
THAT IDENTIFIES EACH HOST (E.G., RUN RANDOM 
NUMBER GENERATOR TO PRODUCE A RANDOM 
NUMBER TO USE FOR EACH MASTER TOKEN OR 
HOST TOKEN). 
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104 COMMUNICATE MASTER TOKEN (E.G., 
MASTER PASSWORD) TO HOSTS AND DATA 
STORAGE ASSEMBLIES. 
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106 COMMUNICATE HOST TOKENS TO HOST. 
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122 RECEIVE A REQUEST FROM A HOST TO 
STORE A SET OF DATA (E.G.. VOLUME) IN A DATA 
STORAGE SYSTEM (E.G.. STORAGE AREA 
NETWORK). FOR EXAMPLE. RECEIVE A CREATE 
DATA SPACE COMMAND FROM THE HOST THAT 
INCLUDES THE HOST'S TOKEN. 



124 GENERATE AN INITIAL ACCESS TOKEN FOR 
THE REQUEST (I.E., SPECIFIC ACCESS TOKEN FOR 
THAT SPECIFIC REQUEST). FOR EXAMPLE, 
INVOKE A RANDOM NUMBER GENERATOR TO 
GENERATE A RANDOM NUMBER SUITABLE FOR 
USE AS AN ACCESS TOKEN. 
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126 ALLOCATE STORAGE LOCATIONS (E.G., DISK 
ADDRESSES) IN THE DATA STORAGE SYSTEM TO 
RECEIVE THE SET OF DATA (E.G.. SEND 
AUTHORIZE ACCESS COMMAND TO THE DATA 
STORAGE ASSEMBLY INCLUDING ACCESS TOKEN 
TO BE ASSOCIATED WITH THE DISK ADDRESSES). 



128 PROVIDE HOST WITH LIST OF STORAGE 
LOCATIONS AND THE ACCESS TOKEN FOR THOSE 
LOCATIONS (E.G.. RETURN DISK ADDRESSES AND 
ACCESS TOKEN TO THE HOST FROM A CREATE 
DATA SPACE COMMAND). 
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130 STORE THE SET OF DATA IN THE STORAGE 
LOCATIONS WHILE TAGGING EACH STORAGE 
LOCATION WITH A COPY OF THE ACCESS TOKEN. 
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202 RECEIVE A REQUEST (E.G.. ACCESS DATA 
COMMAND) FROM A HOST TO ACCESS A SET OF 
DATA STORED IN A SET OF STORAGE LOCATIONS 
(E.G., DATA IN RANGE OF DISK ADDRESSES) 
INCLUDING AN ACCESS TOKEN TO BE USED IN 
AUTHORIZING ACCESS TO THE DATA. 
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204 GENERATE AN AUTHORIZATION SIGNAL THAT 
CONTROLS ACCESS TO THE SET OF DATA BASED 
ON THE RECEIVED ACCESS TOKEN AND AN 
ACCESS TOKEN ASSOCIATED WITH THE 
REQUESTED DATA RETRIEVED FROM THE DATA 
STORAGE ASSEMBLY (E.G.. ACCESS TOKEN 
ASSOCIATED WITH THE DISK ADDRESSES 
SPECIFIED IN THE REQUEST FROM THE HOST). 
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206 PROVIDE A RESPONSE SIGNAL TO THE HOST 
(E.G.. PROVIDE THE REQUESTED DATA TO THE 
HOST BASED ON THE AUTHORIZATION SIGNAL 
THAT PROVIDES ACCESS TO READ THE DATA). 
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302 PROVIDE A RETRIEVAL REQUEST TO 
RETRIEVE ACCESS TOKEN ASSOCIATED WITH 
THE STORAGE LOCATIONS (E.G., DISK 
ADDRESSES) HAVING THE REQUESTED DATA. 



304 RETRIEVE THE ACCESS TOKEN FOR THE 
STORAGE LOCATIONS (E.G.. DISK ADDRESSES). 



306 COMPARE THE ACCESS TOKEN RECEIVED 
FROM THE HOST (E.G., IN AN ACCESS DATA 
COMMAND) AND THE RETRIEVED ACCESS TOKEN. 




314 PROVIDE AN ACCESS 
FAILURE SIGNAL (E.G., ERROR 
MESSAGE STORED IN AN 
ERROR LOG). 



310 PRODUCE AN ACCESS APPROVAL SIGNAL 
THAT PROVIDES ACCESS TO THE STORAGE 
LOCATIONS HAVING THE DATA AND RECEIVE 
RESPONSE FROM DATA STORAGE (E.G. READ 
DATA FROM THE DISK ADDRESSES INDICATED IN 
THE ACCESS DATA COMMAND). 



312 PROVIDE RESPONSE (E.G., DATA REQUESTED 
IN THE DATA ACCESS COMMAND) IN A RESPONSE 
SIGNAL TO THE HOST. 
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402 GENERATE A REQUEST FROM A HOST TO A 
DATA STORAGE SYSTEM TO ACCESS A SET OF 
DATA STORED IN STORAGE LOCATIONS IN A DATA 
STORAGE ASSEMBLY. FOR EXAMPLE. GENERATE 
AN ACCESS DATA COMMAND INCLUDING AN 
ACCESS TOKEN AND DISK ADDRESSES FOR THE 
DATA. 
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404 PROVIDE THE REQUEST FROM THE HOST TO 
THE DATA STORAGE SYSTEM INCLUDING THE 
ACCESS TOKEN TO BE USED IN GAINING ACCESS 
TO THE DATA. FOR EXAMPLE. PROVIDE THE 
ACCESS DATA COMMAND TO THE DATA STORAGE 
SYSTEM (E.G.. SEND THE ACCESS DATA COMMAND 
TO A DATA STORAGE ASSEMBLY IN A STORAGE 
AREA NETWORK). 



406 OBTAIN A RESPONSE SIGNAL THAT INDICATES 
ACCESS TO THE SET OF DATA IN THE STORAGE 
LOCATIONS (E.G.. PROVIDES THE REQUESTED 
DATA) OR INDICATES A DENIAL OF ACCESS BASED 
ON COMPARING THE ACCESS TOKEN PROVIDED 
BY THE HOST AND AN ACCESS TOKEN FOR THOSE 
STORAGE LOCATIONS STORED ON THE DATA 
STORAGE ASSEMBLY. 
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502 RECEIVE UPDATE SIGNAL (E.G., TIMING 
SIGNAL) TO UPDATE THE TOKENS (E.G., TO 
UPDATE THE MASTER TOKEN AND ACCESS 
TOKENS IN THE DATA STORAGE ASSEMBLIES). 
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504 GENERATE A NEW SET OF TOKENS (E.G., 
MASTER TOKEN AND ACCESS TOKENS) IN 
RESPONSE TO THE UPDATE SIGNAL. 







506 COMMUNICATE THE NEW SET OF TOKENS 
(E.G.. MASTER TOKEN TO EACH HOST AND DATA 
STORAGE ASSEMBLY, AND ACCESS TOKENS TO 
EACH DATA STORAGE ASSEMBLY) TO REPLACE 
THE EXISTING TOKENS (E.G.. USING THE CHANGE 
MASTER TOKEN COMMAND AND THE AUTHORIZE 
ACCESS COMMAND). 
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